Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/34352e3138392e36302e302f32322d3234203d3e20323635363230.roa
File:                     34352e3138392e36302e302f32322d3234203d3e20323635363230.roa (raw, json)
Hash identifier:          lD/H2daFCo066PI1qKB3DZhuzNpwOgiEjnk7W9y70wY=
Subject key identifier:   1A:9E:51:DD:E4:07:73:97:70:1D:6A:83:FE:A0:C9:23:AE:60:F4:B5
Certificate issuer:       /CN=58C76DEB05E1657B955AB41355B108825D2D69BC
Certificate serial:       48A8C7BBDAEFA3F73BDCF4F7D388E5CBBFDB92A0
Authority key identifier: 58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/34352e3138392e36302e302f32322d3234203d3e20323635363230.roa
Signing time:             Tue 05 Mar 2024 18:23:32 +0000
ROA not before:           Tue 05 Mar 2024 18:18:32 +0000
ROA not after:            Tue 04 Mar 2025 18:23:32 +0000
asID:                     265620
IP address blocks:        45.189.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a8:c7:bb:da:ef:a3:f7:3b:dc:f4:f7:d3:88:e5:cb:bf:db:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C76DEB05E1657B955AB41355B108825D2D69BC
        Validity
            Not Before: Mar  5 18:18:32 2024 GMT
            Not After : Mar  4 18:23:32 2025 GMT
        Subject: CN=1A9E51DDE4077397701D6A83FEA0C923AE60F4B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:c9:ab:d9:c1:c1:00:48:d8:fa:28:c9:c4:
                    b9:00:78:a9:13:cc:d1:b3:83:17:a8:ce:ac:01:34:
                    32:1c:6a:86:c9:f9:a3:94:85:1f:33:20:86:f9:0b:
                    7e:68:9e:59:bc:b7:55:89:c9:cc:6a:9a:4e:6e:c9:
                    10:22:cb:45:61:bc:f9:de:9c:49:9f:48:a6:f0:02:
                    ac:b5:47:af:8c:77:35:ac:f7:4e:7a:37:71:94:2f:
                    09:18:76:9a:d8:10:dc:fc:8b:14:0a:d0:8f:c0:f0:
                    92:7d:6c:65:c2:6a:f4:2b:62:bd:6d:2a:8e:e0:12:
                    3f:9e:a7:a0:c9:bf:a8:67:f2:db:92:76:9c:bc:55:
                    5d:89:5b:87:94:71:de:30:dd:3f:7b:68:08:1b:1b:
                    2a:db:d5:e5:67:d7:41:65:8b:7d:cc:24:7e:bd:26:
                    03:81:2e:3b:4f:1b:8a:c8:a2:2c:70:e9:aa:8e:74:
                    74:22:4d:32:77:2d:d9:69:d3:7e:07:67:17:11:46:
                    61:bc:de:fa:17:d6:ce:6a:d2:15:ae:e1:85:99:1f:
                    a0:8e:f0:1f:1f:86:9a:8d:fe:8b:9e:b7:a0:e6:bf:
                    8d:c6:c6:66:8b:19:50:45:8a:32:13:8d:f0:14:07:
                    77:35:d2:83:f9:02:44:ce:bf:63:97:ef:ca:ea:0e:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9E:51:DD:E4:07:73:97:70:1D:6A:83:FE:A0:C9:23:AE:60:F4:B5
            X509v3 Authority Key Identifier:
                keyid:58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/34352e3138392e36302e302f32322d3234203d3e20323635363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:2a:e9:73:65:b3:be:e0:54:db:8c:45:22:6c:d5:8c:74:
         3e:3a:2f:86:3c:d3:25:e4:ad:66:b7:b5:8e:cb:0b:9f:88:4b:
         ee:d6:b8:8d:06:d2:0c:4f:88:6c:fe:7e:ef:4d:d0:8e:ab:27:
         a9:f3:54:40:79:51:9b:ca:f7:0d:d9:79:d5:a4:90:27:2d:3c:
         53:44:ee:1d:3d:83:b6:6d:7f:83:5c:39:86:3f:8f:06:28:cd:
         ef:65:00:eb:fc:b6:be:a8:7f:62:d1:2b:77:91:6c:42:b9:f1:
         d7:18:57:dd:78:00:3a:98:be:b0:1c:a2:bf:05:2c:5d:f6:d7:
         0d:2c:56:b4:0a:cf:db:ec:17:90:63:79:c5:41:59:57:a0:ee:
         e3:e7:98:02:4f:ff:40:db:d1:8f:bd:10:3e:ac:bf:69:ea:fd:
         d5:73:17:a8:71:a3:d2:a0:44:98:0b:4b:0c:2a:3b:8c:85:8c:
         6f:20:07:00:38:44:c4:53:08:53:d1:ca:5a:53:2d:f3:d1:6f:
         0d:9d:bc:f8:f8:33:a9:62:b0:a8:d0:e5:5f:5b:08:a9:b1:2b:
         be:7e:96:f1:91:c8:45:eb:c8:46:19:ce:d4:75:76:13:65:59:
         02:be:8b:b1:86:5b:ca:3d:89:6d:81:ff:53:f1:e5:d6:09:c2:
         b9:83:4b:c2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSKjHu9rvo/c73PT304jly7/bkqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThDNzZERUIwNUUxNjU3Qjk1NUFCNDEzNTVCMTA4ODI1
RDJENjlCQzAeFw0yNDAzMDUxODE4MzJaFw0yNTAzMDQxODIzMzJaMDMxMTAvBgNV
BAMTKDFBOUU1MURERTQwNzczOTc3MDFENkE4M0ZFQTBDOTIzQUU2MEY0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQMmr2cHBAEjY+ijJxLkAeKkT
zNGzgxeozqwBNDIcaobJ+aOUhR8zIIb5C35onlm8t1WJycxqmk5uyRAiy0VhvPne
nEmfSKbwAqy1R6+MdzWs9056N3GULwkYdprYENz8ixQK0I/A8JJ9bGXCavQrYr1t
Ko7gEj+ep6DJv6hn8tuSdpy8VV2JW4eUcd4w3T97aAgbGyrb1eVn10Fli33MJH69
JgOBLjtPG4rIoixw6aqOdHQiTTJ3Ldlp034HZxcRRmG83voX1s5q0hWu4YWZH6CO
8B8fhpqN/ouet6Dmv43GxmaLGVBFijITjfAUB3c10oP5AkTOv2OX78rqDmBHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGp5R3eQHc5dwHWqD/qDJI65g9LUwHwYDVR0j
BBgwFoAUWMdt6wXhZXuVWrQTVbEIgl0tabwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjJGMUJBRTQyNzkwOTc2MzUxMkI3MDAxRTY5NDA0NUI5
RkFCOTQ3N0ZDQ0MxRUUyQjY4MzBFMEEwODM4QjFBLzAvNThDNzZERUIwNUUxNjU3
Qjk1NUFCNDEzNTVCMTA4ODI1RDJENjlCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OEM3NkRFQjA1RTE2NTdCOTU1
QUI0MTM1NUIxMDg4MjVEMkQ2OUJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUIyRjFCQUU0Mjc5MDk3NjM1MTJCNzAwMUU2OTQwNDVCOUZBQjk0NzdG
Q0NDMUVFMkI2ODMwRTBBMDgzOEIxQS8wLzM0MzUyZTMxMzgzOTJlMzYzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTM2MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi29PDAN
BgkqhkiG9w0BAQsFAAOCAQEAm8Aq6XNls77gVNuMRSJs1Yx0PjovhjzTJeStZre1
jssLn4hL7ta4jQbSDE+IbP5+703QjqsnqfNUQHlRm8r3Ddl51aSQJy08U0TuHT2D
tm1/g1w5hj+PBijN72UA6/y2vqh/YtErd5FsQrnx1xhX3XgAOpi+sByivwUsXfbX
DSxWtArP2+wXkGN5xUFZV6Du4+eYAk//QNvRj70QPqy/aer91XMXqHGj0qBEmAtL
DCo7jIWMbyAHADhExFMIU9HKWlMt89FvDZ28+PgzqWKwqNDlX1sIqbErvn6W8ZHI
RevIRhnO1HV2E2VZAr6LsYZbyj2JbYH/U/Hl1gnCuYNLwg==
-----END CERTIFICATE-----
Generated at Sat May 25 20:53:04 2024 by rpki-client on console-ams.rpki-client.org